🔥 40% Off Crucial Exams Memberships — This Week Only

2 days, 7 hours remaining!
Crucial Exams

ISC2 Systems Security Certified Practitioner (SSCP) Practice Question

A senior security engineer at a SaaS provider uncovers a critical CVSS 10.0 vulnerability in a customer-facing microservice running on Microsoft Azure. To be sure development, operations, and executive leadership fully understand the risk and act in concert, which approach best exemplifies effective risk socialization in line with sound risk-management practice?

  • Patch the affected microservice during the next maintenance window without notifying other teams to avoid alarming customers.

  • Adjust the vulnerability scanner settings to suppress false positives and rerun the scan before taking further action.

  • Open a security-only ticket containing full technical details and mark it restricted to prevent information leakage.

  • Facilitate a cross-functional meeting to review the risk register entry, explain business impact, and assign mitigation owners.

ISC2 Systems Security Certified Practitioner (SSCP)
Risk Identification, Monitoring and Analysis
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot